POJIA破甲
地图 / Lengthy manual entry of 2FA secret

Lengthy manual entry of 2FA secret

业务逻辑 / 业务逻辑错误 / #259415

厂商
Legal Robot
严重程度
未评级
赏金
—
弱点
业务逻辑错误
研究员
@goodhackonly
披露日期
2017-08-15
资产
app.legalrobot-test.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1496 字符中的一小部分)
I would like to report on some issue where users are going to face while 2FA authentication.We can see that users need to enter 52 bit code manually for 2FA authentication,which is taking a lot of time and it will be difficult for the user to enter the total 52 bits in the google authenticator app …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Legal Robot 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @goodhackonly · 版权归作者与 Legal Robot 所有

同类报告

Modify in-flight data to payment provider Smart2PayValve · 2021-08-10 · $7,500H1514 Ability to MiTM Shopify PoS Session to Takeover CommunicationsShopify · 2019-11-04Hackerone is not properly deleting user idHackerOne · 2021-06-11Double Payout via PayPalCoinbase · 2018-04-04 · $10,000Getting New Invitations without Leaving ProgramsHackerOne · 2020-10-15[fleet.city-mobil.ru] Driver balance increasingMail.ru · —